Sphinx HTML and 17-page LaTeX PDF for the audit-ready pack

source/ is the Sphinx tree. Companion PDF hrefs are relative, not Markdown.

source/index.rst

@@ -0,0 +1,61 @@
+Making yourself audit-ready with Verae DataCubes
+================================================
+
+How to **prepare an organization** for HIPAA-aligned, SOC 2, or ISO 27001
+work using Verae DataCubes on **Peergos** (encrypted cryptree + hashed
+IPFS) and HPKE on an **untrusted NATS** broker.
+
+**This document is not a HIPAA, SOC 2, or ISO certificate.**
+Peergos’s public pentests are **not** your Type II or ISO registrar
+certificate. They are **component security evaluations** you can attach.
+
+.. toctree::
+   :maxdepth: 2
+
+   verification
+   architecture
+   baa-dpa
+   checklist
+   howto
+
+What we verified about Peergos (EU)
+-----------------------------------
+
+See the full sourced table in :doc:`verification`.
+
+* Encrypted client-side filesystem (cryptree); keys not on the storage
+  server — **yes** (Peergos book + Cure53 design review).
+* IPFS blocks content-addressed; Peergos verifies hashes — **yes**.
+* Independent **EU** security audits, reports published — **yes, two:**
+  Cure53 Berlin (2019); Radically Open Security Amsterdam (2024).
+* “Peergos is HIPAA/SOC 2/ISO certified” — **no.** Those audits are
+  pentest/code/design reviews, not management-system certificates.
+
+Peergos **was designed as a trust-minimized encrypted filesystem**,
+**evaluated in Europe** by two specialist firms, with **public reports**.
+That supports the **at-rest / backup** story. It does **not** finish
+*your* audit.
+
+.. only:: html
+
+   Live technical surfaces:
+
+   * https://pfc.georgelambert.org/health
+   * https://pfc.georgelambert.org/v1/npe/keys
+   * https://docs.pfc.georgelambert.org/controls.html
+   * https://git.georgelambert.org/marchon/peergos-making-yourself-audit-ready-with-verae-datacubes
+
+   Companion system docs (HTML): https://docs.pfc.georgelambert.org/
+
+.. only:: latex
+
+   Companion PDFs in the **same directory** as this file (relative PDF
+   links, not Markdown):
+
+   .. raw:: latex
+
+      \begin{itemize}
+      \item \href{peergos-for-compliance.pdf}{peergos-for-compliance.pdf}
+      \item \href{nats-service-endpoints.pdf}{nats-service-endpoints.pdf}
+      \item \href{secure-messaging.pdf}{secure-messaging.pdf}
+      \end{itemize}